mozilla/MozDef issues and pull requests

#1727 - Add decom notice to readme

Pull Request - State: closed - Opened by pwnbus over 3 years ago - 4 comments

#1726 - Remove survey links

Pull Request - State: closed - Opened by gene1wood over 3 years ago

#1725 - Bump jquery-ui from 1.12.1 to 1.13.0 in /meteor

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies, javascript, ARCHIVED

#1724 - "make build" fails during meteor build due to expired certificates

Issue - State: closed - Opened by MedAlch over 3 years ago
Labels: ARCHIVED

#1723 - AWS Changing GuardDuty finding type September 1, 2021

Issue - State: closed - Opened by gene1wood over 3 years ago - 1 comment
Labels: ARCHIVED

#1722 - Bump cryptography from 3.2 to 3.3.2

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies, python

#1721 - Remove uptycs data source

Pull Request - State: closed - Opened by pwnbus over 3 years ago

#1720 - Improve papertrail mq worker

Pull Request - State: closed - Opened by pwnbus over 3 years ago

#1719 - Update ssh releng alert to take new event format into consideration

Pull Request - State: closed - Opened by pwnbus over 3 years ago

#1718 - Bump pip from 18.1 to 19.2 in /mozdef_util

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies, python

#1717 - Does this diagram match the architecture you have in mind?

Issue - State: closed - Opened by joenoll over 3 years ago - 1 comment

#1716 - Error add whatlist for alert

Issue - State: closed - Opened by Thang1102 almost 4 years ago
Labels: ARCHIVED

#1715 - Bump rsa from 3.1.4 to 4.7

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago
Labels: dependencies, python

#1714 - Remove session invalidation alert

Pull Request - State: closed - Opened by claudijd almost 4 years ago

#1713 - Provide configurable email patterns for bruteforce alerts

Pull Request - State: closed - Opened by claudijd almost 4 years ago
Labels: ARCHIVED

#1712 - Add more comments to ipblocklist message

Pull Request - State: closed - Opened by densfox almost 4 years ago

#1711 - Bump bottle from 0.12.4 to 0.12.19

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago
Labels: dependencies, python

#1710 - Bump pyyaml from 5.1.1 to 5.4

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago
Labels: dependencies, python

#1709 - Bump rsa from 3.1.4 to 4.1

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago - 1 comment
Labels: dependencies, python

#1708 - Add username via auth0 plugin

Pull Request - State: closed - Opened by densfox almost 4 years ago

#1707 - Fix tests in github actions

Pull Request - State: closed - Opened by pwnbus almost 4 years ago

#1706 - Add search username plugin via auth0

Pull Request - State: closed - Opened by densfox almost 4 years ago

#1705 - Bump httplib2 from 0.18.0 to 0.19.0

Pull Request - State: closed - Opened by dependabot[bot] about 4 years ago - 1 comment
Labels: dependencies, python

#1702 - Google workspace audit/admin logs

Issue - State: closed - Opened by Phrozyn about 4 years ago
Labels: ARCHIVED

#1701 - Add the Makefile 'restart' recipe

Pull Request - State: closed - Opened by matletix about 4 years ago

#1700 - Add a stricter MQ plugin registration method

Pull Request - State: closed - Opened by matletix about 4 years ago - 2 comments
Labels: ARCHIVED

#1697 - docs: fix simple typo, somehwere -> somewhere

Pull Request - State: closed - Opened by timgates42 about 4 years ago

#1696 - Travis CI free usage ends Dec 3; mozilla repos should switch to other CI platforms

Issue - State: closed - Opened by hwine about 4 years ago
Labels: ARCHIVED

#1695 - esworker.sqs.py has obscured logic regarding detection of message encoding (json vs base64)

Issue - State: closed - Opened by gene1wood about 4 years ago
Labels: ARCHIVED

#1694 - Give endpoint methods unique names

Pull Request - State: closed - Opened by matletix about 4 years ago - 1 comment

#1692 - Sentry integration

Issue - State: closed - Opened by matletix about 4 years ago
Labels: ARCHIVED

#1690 - Bump cryptography from 2.3.1 to 3.2

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago
Labels: dependencies, python

#1682 - Join regular testing commands for predictability in Alert Guide

Pull Request - State: closed - Opened by claudijd over 4 years ago
Labels: ARCHIVED

#1671 - Bump jquery from 3.4.0 to 3.5.0 in /meteor

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago - 1 comment
Labels: dependencies, javascript, ARCHIVED

#1621 - Change auth02mozdef from Auth0 logs to Auth0 logstream

Issue - State: closed - Opened by gene1wood almost 5 years ago
Labels: ARCHIVED

#1607 - Standardize "raw" field name and format

Issue - State: closed - Opened by gene1wood almost 5 years ago - 4 comments
Labels: ARCHIVED

#1592 - Change Auth0 event stream from cron based log fetch to push AWS EventBridge stream

Issue - State: closed - Opened by gene1wood almost 5 years ago - 1 comment

#1518 - Use standard boto credential provider chain instead of using configlib

Issue - State: closed - Opened by andrewkrug over 5 years ago
Labels: ARCHIVED

#1490 - Possible Security Problems

Issue - State: closed - Opened by ctindall over 5 years ago
Labels: ARCHIVED

#1402 - Clarify mandatory fields in usage

Issue - State: closed - Opened by gene1wood over 5 years ago - 2 comments
Labels: ARCHIVED

#1393 - Design and document a release process

Issue - State: closed - Opened by gene1wood over 5 years ago
Labels: ARCHIVED

#1374 - File ownership in docker containers allows mozdef user to modify code

Issue - State: closed - Opened by gene1wood over 5 years ago - 4 comments
Labels: ARCHIVED

#1363 - Add healthcheck to docker cron container

Issue - State: closed - Opened by pwnbus over 5 years ago
Labels: category:enhancement, ARCHIVED

#1362 - Consider Adopting a Format Like ASFF for Alert Adjacent Data

Issue - State: closed - Opened by andrewkrug over 5 years ago - 1 comment
Labels: category:enhancement, category:question, ARCHIVED

#1352 - Explore and possibly implement Elasticstack RBAC feature

Issue - State: closed - Opened by Phrozyn over 5 years ago
Labels: category:enhancement, ARCHIVED

#1324 - Enrich CloudTrail actor identity

Issue - State: closed - Opened by gene1wood over 5 years ago
Labels: category:enhancement, ARCHIVED

#1320 - Update to elasticsearch and Kibana to 7.1.1

Issue - State: closed - Opened by shyamkrishna123 over 5 years ago - 2 comments
Labels: category:enhancement, category:question, ARCHIVED

#1314 - Allow support for escaping characters in generic alerts rule parser

Issue - State: closed - Opened by pwnbus over 5 years ago
Labels: ARCHIVED

#1313 - Add support for OR operations in generic alerts

Issue - State: closed - Opened by pwnbus over 5 years ago
Labels: ARCHIVED

#1312 - Add healthchecks to docker environment

Issue - State: closed - Opened by pwnbus over 5 years ago
Labels: ARCHIVED

#1303 - Reform docker container dependencies

Issue - State: closed - Opened by gene1wood over 5 years ago - 2 comments
Labels: cloud, ARCHIVED

#1300 - Unable to install pip requirements on Mac OS X

Issue - State: closed - Opened by pwnbus over 5 years ago - 2 comments
Labels: ARCHIVED

#1250 - Change CodeBuild to use different OS

Issue - State: closed - Opened by gene1wood almost 6 years ago - 1 comment
Labels: cloud, ARCHIVED

#1238 - Establish health check endpoint which surfaces health of instance

Issue - State: closed - Opened by gene1wood almost 6 years ago
Labels: category:feature, cloud, ARCHIVED

#1217 - docs/source/_static/theme_overrides.css matches .gitignore. Which do we want?

Issue - State: closed - Opened by gene1wood almost 6 years ago - 2 comments
Labels: category:bug, ARCHIVED

#1216 - Use client credentials grant to obtain a token when querying auth0 api

Issue - State: closed - Opened by gdestuynder almost 6 years ago
Labels: category:enhancement, ARCHIVED

#1194 - Bootstrap creates weekly index alias every time, even if it exists

Issue - State: closed - Opened by gene1wood almost 6 years ago
Labels: category:enhancement, ARCHIVED

#1185 - Make mongodb container cleanup lock on termination

Issue - State: closed - Opened by gene1wood almost 6 years ago
Labels: category:bug, cloud, ARCHIVED

#1173 - Delete various large binaries and third party js no longer used from git history

Issue - State: closed - Opened by gene1wood almost 6 years ago
Labels: category:enhancement, ARCHIVED

#1169 - Focus the sed line that modifies the compose file

Issue - State: closed - Opened by gene1wood almost 6 years ago - 1 comment
Labels: cloud, ARCHIVED

#1142 - Enable TLS services in docker environment

Issue - State: closed - Opened by pwnbus almost 6 years ago
Labels: category:enhancement, ARCHIVED

#1096 - MozDef worker redesign proposal

Issue - State: closed - Opened by gene1wood about 6 years ago - 2 comments
Labels: category:enhancement, ARCHIVED

#1088 - Add documentation on generic alerts

Issue - State: closed - Opened by gene1wood about 6 years ago
Labels: category:doc, ARCHIVED

#1062 - Note field in Notes tab has white text on a white background

Issue - State: closed - Opened by gene1wood about 6 years ago - 2 comments
Labels: category:bug, ARCHIVED

#1036 - Parent Cloudformation Stack Accepts a tagged release

Issue - State: closed - Opened by andrewkrug about 6 years ago
Labels: cloud, ARCHIVED

#1035 - CI/CD Cloudy MozDef

Issue - State: closed - Opened by andrewkrug about 6 years ago
Labels: cloud, ARCHIVED

#1012 - Move CloudTrail worker to Lambda, enable event correlation

Issue - State: closed - Opened by gene1wood about 6 years ago
Labels: category:feature, cloud, ARCHIVED

#1010 - Switch CloudTrail transformation to use readOnly field

Issue - State: closed - Opened by gene1wood about 6 years ago
Labels: category:enhancement, ARCHIVED

#982 - Allow alert configuration via environment variables

Issue - State: closed - Opened by pwnbus about 6 years ago - 6 comments
Labels: ARCHIVED

#921 - Improve docker space efficiency

Issue - State: closed - Opened by gene1wood over 6 years ago - 1 comment
Labels: ARCHIVED

#914 - Create child and subchild CloudFormation stacks to provision all service linked IAM roles

Issue - State: closed - Opened by gene1wood over 6 years ago
Labels: cloud, ARCHIVED

#898 - Allow passing git hash as CloudFormation parameter, passed to docker compose

Issue - State: closed - Opened by gene1wood over 6 years ago
Labels: cloud, ARCHIVED

#871 - Enable pointing Route53 domain name alias at AWS ALB

Issue - State: closed - Opened by gene1wood over 6 years ago - 1 comment
Labels: cloud, ARCHIVED

#863 - Add a contributing.md

Issue - State: closed - Opened by andrewkrug over 6 years ago - 1 comment
Labels: cloud, ARCHIVED

#853 - Support adding elasticcache to the stack

Issue - State: closed - Opened by andrewkrug over 6 years ago
Labels: cloud, ARCHIVED

#852 - Abstract the kombu connection layer

Issue - State: closed - Opened by andrewkrug over 6 years ago
Labels: cloud, ARCHIVED

#851 - Harden the docker container deployment on the mozdef instances

Issue - State: closed - Opened by andrewkrug over 6 years ago
Labels: cloud, ARCHIVED

#849 - Fix hard coded boto regions keys and secrets

Issue - State: closed - Opened by andrewkrug over 6 years ago - 3 comments
Labels: ARCHIVED

#848 - Make lambda logger ephemeral

Issue - State: closed - Opened by andrewkrug over 6 years ago
Labels: cloud, ARCHIVED

#846 - Add the guardduty finding transformations to the stack.

Issue - State: closed - Opened by andrewkrug over 6 years ago - 1 comment
Labels: cloud, ARCHIVED

#845 - Move lost mozdef mq cfn to a branch

Issue - State: closed - Opened by andrewkrug over 6 years ago - 1 comment
Labels: cloud, ARCHIVED

#844 - Templatize mozdef alerts config.py file or refactor with everett to introduce the standard config parameter pipeline

Issue - State: closed - Opened by andrewkrug over 6 years ago - 2 comments
Labels: cloud, ARCHIVED

GitHub / mozilla/MozDef issues and pull requests